Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
File: WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft (raw, json)
Hash identifier: b2mICWZ1dUFhtaOKIwYfECdMRMeTh6iJI+c7p4DhoMk=
Subject key identifier: 29:6A:FE:BB:32:30:C3:C0:BA:8F:A1:C2:2B:BD:F3:B5:23:91:AE:B5
Authority key identifier: 59:91:95:84:03:3C:39:11:A0:09:BD:DE:31:83:F6:C6:0B:2A:FC:CA
Certificate issuer: /CN=59919584033c3911a009bdde3183f6c60b2afcca
Certificate serial: 019680FDF4228CD643A09FFC6C5B2ED5CB8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
Manifest number: 0BC0
Signing time: Tue 29 Apr 2025 10:00:48 +0000
Manifest this update: Tue 29 Apr 2025 10:00:48 +0000
Manifest next update: Wed 30 Apr 2025 10:00:48 +0000
Files and hashes: 1: 3iX2jkkHiD5MWdLtUD1Exzmo13Q.roa (hash: 3QNrKYAXHRyi/BOzLIrAyRHDvtVW/W4+B5tMO6HApyM=)
2: WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl (hash: 55HCGy5JPrsuFXchMwElF9hLLGGzqkrGaiCQhO7mqyI=)
3: ula9jfoyo-Oxj4oQTJhGSM2DQ5o.roa (hash: +U/LkfnqXi7jglNA2KgxDFsmoz1cp5+KfODGzHBZoUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Apr 2025 09:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:80:fd:f4:22:8c:d6:43:a0:9f:fc:6c:5b:2e:d5:cb:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59919584033c3911a009bdde3183f6c60b2afcca
Validity
Not Before: Apr 29 10:00:48 2025 GMT
Not After : Apr 30 10:00:48 2025 GMT
Subject: CN=296afebb3230c3c0ba8fa1c22bbdf3b52391aeb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:45:54:8a:3e:49:26:fa:5d:95:95:fd:c3:5c:
52:94:38:b0:31:1d:2f:64:21:b1:4b:34:df:16:84:
18:51:94:b5:74:56:9d:b0:a8:4c:46:c7:fe:03:c8:
0b:b4:93:60:ee:02:28:cc:be:6d:4b:d6:de:34:76:
fa:8b:45:ca:d8:08:3d:9a:85:ff:e7:b3:26:27:f4:
eb:02:e5:f3:ae:89:52:24:8a:ed:24:69:da:c6:49:
b2:3f:2d:b6:2a:a7:3e:bf:e0:78:7e:93:8a:36:cd:
09:cc:83:7e:e2:ca:1e:89:09:86:bc:e6:f1:fa:39:
b1:a8:ef:71:74:db:73:7d:84:55:a9:d5:7d:dd:97:
fb:a9:a6:f8:c8:d8:99:2c:87:4e:f1:f5:55:eb:18:
f4:ff:1a:54:1c:2f:a1:c7:bc:bf:89:8d:c7:24:ad:
09:f0:52:04:49:de:7c:d7:ba:08:df:c1:f0:ca:2b:
72:d5:a8:5c:84:69:b7:85:b4:d2:e8:35:e5:5a:48:
11:13:35:43:14:04:5c:72:02:f9:c0:0b:a5:7d:05:
97:13:63:55:8c:4e:15:6a:df:cf:05:2a:7e:ed:ca:
8f:e3:c0:3b:11:3c:16:0b:c7:a3:fc:ec:86:52:13:
62:64:d9:ea:4c:44:03:f5:58:e2:d5:a6:95:35:ca:
d0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:6A:FE:BB:32:30:C3:C0:BA:8F:A1:C2:2B:BD:F3:B5:23:91:AE:B5
X509v3 Authority Key Identifier:
keyid:59:91:95:84:03:3C:39:11:A0:09:BD:DE:31:83:F6:C6:0B:2A:FC:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/2fea18-fb62-4b95-9feb-9cf811e9fa7a/1/WZGVhAM8ORGgCb3eMYP2xgsq_Mo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:df:96:3c:82:27:99:28:34:d6:91:c5:2a:e5:08:b4:91:98:
ab:6f:5d:b3:50:b2:0e:39:22:f0:12:3e:74:d7:ff:2b:ba:75:
4c:b8:ca:c2:af:f1:73:65:ef:c7:c2:b9:43:f7:76:c5:b0:bc:
81:26:57:8f:a3:50:b9:8f:4c:62:88:0d:ac:b1:e6:a1:71:e9:
a7:3e:ae:b6:94:13:c7:7f:de:b7:9d:40:b7:8a:fe:bc:45:82:
57:3c:f2:68:09:ba:d9:13:0d:ec:1a:58:4a:c2:b5:73:46:f4:
27:a1:85:e6:17:8a:53:2d:50:4d:cd:21:54:2b:74:49:8a:74:
f5:23:ad:df:25:11:26:18:0e:d3:80:f4:c8:6d:23:16:d9:2d:
9d:f5:4f:76:fe:1c:0f:09:8a:2f:e4:9d:24:f5:df:3c:9a:2f:
f7:d1:cf:30:e0:8a:67:35:52:53:23:da:d4:cf:78:cc:3c:98:
49:d9:2c:27:f2:2d:4e:64:35:75:1f:1a:63:29:9e:ee:c7:49:
f4:b2:e8:d6:f3:5f:69:bd:43:08:71:16:4d:e9:be:3e:fd:02:
95:e3:93:b0:a1:a7:3d:1b:01:03:8f:c1:0b:18:ee:f7:da:aa:
ac:71:4a:16:98:e6:86:27:19:bc:16:09:d4:d0:a0:54:09:2c:
97:8c:38:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaA/fQijNZDoJ/8bFsu1cuNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU5OTE5NTg0MDMzYzM5MTFhMDA5YmRkZTMxODNmNmM2MGIy
YWZjY2EwHhcNMjUwNDI5MTAwMDQ4WhcNMjUwNDMwMTAwMDQ4WjAzMTEwLwYDVQQD
EygyOTZhZmViYjMyMzBjM2MwYmE4ZmExYzIyYmJkZjNiNTIzOTFhZWI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu0VUij5JJvpdlZX9w1xSlDiwMR0v
ZCGxSzTfFoQYUZS1dFadsKhMRsf+A8gLtJNg7gIozL5tS9beNHb6i0XK2Ag9moX/
57MmJ/TrAuXzrolSJIrtJGnaxkmyPy22Kqc+v+B4fpOKNs0JzIN+4soeiQmGvObx
+jmxqO9xdNtzfYRVqdV93Zf7qab4yNiZLIdO8fVV6xj0/xpUHC+hx7y/iY3HJK0J
8FIESd5817oI38Hwyity1ahchGm3hbTS6DXlWkgREzVDFARccgL5wAulfQWXE2NV
jE4Vat/PBSp+7cqP48A7ETwWC8ej/OyGUhNiZNnqTEQD9Vji1aaVNcrQDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClq/rsyMMPAuo+hwiu987Ujka61MB8GA1UdIwQY
MBaAFFmRlYQDPDkRoAm93jGD9sYLKvzKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV1pHVmhBTThPUkdnQ2IzZU1ZUDJ4Z3NxX01vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8yZmVhMTgtZmI2Mi00Yjk1LTlmZWIt
OWNmODExZTlmYTdhLzEvV1pHVmhBTThPUkdnQ2IzZU1ZUDJ4Z3NxX01vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8yZmVhMTgtZmI2Mi00Yjk1LTlmZWItOWNmODExZTlmYTdh
LzEvV1pHVmhBTThPUkdnQ2IzZU1ZUDJ4Z3NxX01vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALt+WPIIn
mSg01pHFKuUItJGYq29ds1CyDjki8BI+dNf/K7p1TLjKwq/xc2Xvx8K5Q/d2xbC8
gSZXj6NQuY9MYogNrLHmoXHppz6utpQTx3/et51At4r+vEWCVzzyaAm62RMN7BpY
SsK1c0b0J6GF5heKUy1QTc0hVCt0SYp09SOt3yURJhgO04D0yG0jFtktnfVPdv4c
DwmKL+SdJPXfPJov99HPMOCKZzVSUyPa1M94zDyYSdksJ/ItTmQ1dR8aYyme7sdJ
9LLo1vNfab1DCHEWTem+Pv0CleOTsKGnPRsBA4/BCxju99qqrHFKFpjmhicZvBYJ
1NCgVAksl4w4xQ==
-----END CERTIFICATE-----
Generated at Tue Apr 29 12:42:38 2025 by rpki-client